CVE-2009-3379
CVE-2009-3379
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple unspecified vulnerabilities in libvorbis, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors. NOTE: this might overlap CVE-2009-2663.
EPSS 5.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
libvorbis Debian:12
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
libvorbis Debian:13
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
libvorbis Debian:14
- Affected ranges
- ECOSYSTEM: < 1.2.3-1
Update to 1.2.3-1
libvorbisidec Debian:12
- Affected ranges
- ECOSYSTEM: < 1.0.2+svn18153-0.1
Update to 1.0.2+svn18153-0.1
libvorbisidec Debian:13
- Affected ranges
- ECOSYSTEM: < 1.0.2+svn18153-0.1
Update to 1.0.2+svn18153-0.1
libvorbisidec Debian:14
- Affected ranges
- ECOSYSTEM: < 1.0.2+svn18153-0.1
Update to 1.0.2+svn18153-0.1
Original sources
- https://bugzilla.mozilla.org/show_bug.cgi?id=507167
- http://secunia.com/advisories/37340
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582
- https://bugzilla.mozilla.org/show_bug.cgi?id=500254
- http://secunia.com/advisories/37306
- https://bugzilla.mozilla.org/show_bug.cgi?id=501279
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1
- http://www.redhat.com/support/errata/RHSA-2009-1561.html
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993
- https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=499512
- http://www.ubuntu.com/usn/USN-861-1
- http://www.mozilla.org/security/announce/2009/mfsa2009-63.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=515889
- http://www.vupen.com/english/advisories/2009/3334
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:294
- https://nvd.nist.gov/vuln/detail/CVE-2009-3379